File _patchinfo of Package patchinfo.8795
<patchinfo incident="8795">
<issue tracker="bnc" id="1105443">VUL-1: CVE-2018-1000632: dom4j: version prior to version 2.1.1 contains a CWE-91: XML Injectionvulnerability in Class: Element. Methods: addElement, addAttribute that canresult in an attacker tampering with XML documents through XML</issue>
<issue tracker="cve" id="2018-1000632"/>
<category>security</category>
<rating>moderate</rating>
<packager>pmonrealgonzalez</packager>
<description>This update for dom4j fixes the following issues:
- CVE-2018-1000632: Prevent XML injection that could have resulted in an
attacker tampering with XML documents (bsc#1105443).
</description>
<summary>Security update for dom4j</summary>
</patchinfo>